Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e/a6cf8bc4-c6cf-3ab1-9852-c27458edc9b8.roa
File:                     a6cf8bc4-c6cf-3ab1-9852-c27458edc9b8.roa (raw, json)
Hash identifier:          ELNlFBi6HLmj5m0GRwgX58wEPvnNxSc2KxzPSL4MJS0=
Subject key identifier:   47:6A:45:A8:6D:A1:AF:D2:6D:FF:10:58:14:B1:72:8B:F5:CB:E8:F1
Certificate issuer:       /CN=95a5a86f-706a-45b6-baf2-da4d4e62b10e
Certificate serial:       010D0C9F4328584EEA87639779DF67F9F4347E80
Authority key identifier: 04:90:85:06:ED:47:37:CD:B1:C3:3C:D7:3A:D9:F5:59:C8:85:35:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e/a6cf8bc4-c6cf-3ab1-9852-c27458edc9b8.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        204.138.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e/95a5a86f-706a-45b6-baf2-da4d4e62b10e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e/95a5a86f-706a-45b6-baf2-da4d4e62b10e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:63:97:79:df:67:f9:f4:34:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a5a86f-706a-45b6-baf2-da4d4e62b10e
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=3abbe9c6-5854-4997-bb2e-116d1c7c1ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a3:e6:19:af:71:18:1e:47:1d:f4:aa:9a:88:
                    33:74:3c:0d:85:e9:f2:58:d7:6c:6d:85:b9:e9:1e:
                    ed:ee:c0:d2:da:10:cd:31:1c:f7:cb:e3:4c:4f:80:
                    d6:21:0c:50:06:f4:c2:78:a6:17:6e:2a:29:5f:a8:
                    06:6a:b0:09:ef:ce:aa:4f:0e:0e:6d:c2:5d:e7:5b:
                    b6:c1:89:09:86:08:cc:2e:ec:40:a0:d0:05:df:2b:
                    0d:20:ba:9f:da:5f:d2:d0:9d:cf:b1:ab:ab:85:a7:
                    94:34:5a:50:0e:28:fb:7e:62:93:ea:cc:29:ca:04:
                    7b:26:0e:d7:1d:38:dd:ae:e9:aa:17:8d:af:8a:e4:
                    1b:01:d1:f7:b1:d8:8d:4e:b7:56:d2:d1:98:19:89:
                    f1:57:c8:d8:bf:62:ea:a6:46:55:08:a9:be:15:fa:
                    ab:2c:74:09:ed:76:5c:26:81:9e:85:99:15:04:2f:
                    54:e2:61:58:ff:0b:8f:6b:cf:59:dd:bd:7c:f9:f6:
                    05:b2:21:9f:60:51:54:e7:38:65:e2:c0:c0:39:94:
                    a8:ca:26:cf:2f:33:78:40:85:74:f5:20:90:d3:07:
                    eb:dd:3d:14:2d:87:e4:19:d4:5c:ea:aa:c0:26:47:
                    9b:b1:b4:b6:fd:11:81:a8:2e:ae:61:39:80:09:30:
                    a2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6A:45:A8:6D:A1:AF:D2:6D:FF:10:58:14:B1:72:8B:F5:CB:E8:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e/a6cf8bc4-c6cf-3ab1-9852-c27458edc9b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e/95a5a86f-706a-45b6-baf2-da4d4e62b10e.crl

            X509v3 Authority Key Identifier:
                keyid:04:90:85:06:ED:47:37:CD:B1:C3:3C:D7:3A:D9:F5:59:C8:85:35:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.138.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:6a:11:2f:b5:9a:62:bb:24:38:d6:ed:68:dc:99:98:b9:7d:
         60:48:1e:93:24:95:c8:e9:98:2e:fe:5f:78:d8:3d:94:57:83:
         25:51:82:01:1e:0e:7f:2a:c5:28:c6:5e:ec:38:44:96:c6:66:
         ef:58:26:0c:4c:ee:8a:68:84:e7:d2:69:70:67:84:c2:26:0e:
         23:ff:92:1a:e7:c6:36:19:f5:ea:a6:bf:92:f1:c4:97:22:20:
         94:cc:99:f9:b0:60:f5:cb:e3:27:df:12:ef:9c:9a:52:5e:8b:
         b2:1c:4f:b1:36:64:93:12:dd:59:c5:78:48:75:66:15:56:0d:
         1c:cc:fe:9e:4f:fb:f9:9e:86:fb:6f:32:df:c0:ec:13:fb:12:
         94:e6:2d:50:f0:46:f0:27:e9:1a:78:c7:ed:4d:59:5a:45:e2:
         76:22:67:54:3c:a7:69:02:41:20:c8:32:4f:98:8f:d9:de:c8:
         f1:4a:70:ab:ef:a7:75:59:63:d9:72:36:fe:f0:10:02:01:2c:
         76:c4:c6:f1:6b:ed:bb:7e:ea:9e:85:02:d2:46:d4:68:6b:ca:
         d5:ca:c7:e8:1c:f4:d0:68:11:71:24:76:41:f8:c2:ff:15:6e:
         10:83:72:d5:6e:84:24:c8:51:2a:c5:c3:dc:37:40:fe:dc:8c:
         53:e0:e8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:52:22 2026 by rpki-client